This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft File: sO8ZvLI6LwTFhqwTEakbx8oql2U.mft (raw, json) Hash identifier: Js4zn8l+mN+T3ZaiiHFbt7nH2iN7zKRrQxmKi5Pj1Rk= Subject key identifier: CC:C9:C9:79:A8:AA:C1:50:42:2B:E8:E0:7F:8B:8F:FB:2D:7A:5D:A8 Authority key identifier: B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 Certificate issuer: /CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Certificate serial: 019AF12EB581860D042ED88132A5C799E884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft Manifest number: 0B50 Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: E6bot_tKJqCzADpBxFeKtsutgCs.roa (hash: IzVVajCV/IB0bxI8d5Bqo7CZjFjDagAuPrwaJPvu9o8=) 2: sO8ZvLI6LwTFhqwTEakbx8oql2U.crl (hash: BzB1CivD8oQe2P1YSRZ1q2ujNxhUsy4tAFF1g06HLsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:81:86:0d:04:2e:d8:81:32:a5:c7:99:e8:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0ef19bcb23a2f04c586ac1311a91bc7ca2a9765 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=ccc9c979a8aac150422be8e07f8b8ffb2d7a5da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c8:03:1c:62:0f:5a:64:b0:35:a4:60:9a:46: 2b:eb:15:38:fa:2b:15:f6:c1:ab:37:59:94:49:90: a9:0f:38:98:ea:ae:91:69:db:aa:4f:7a:83:c0:79: f7:15:f5:d7:bc:1a:dd:d6:90:a2:79:96:69:c5:43: 50:18:41:6f:4f:6e:57:e1:be:06:2a:d7:ab:76:4d: b8:6b:b5:c8:3a:d3:55:49:6e:cf:b0:d7:b3:8e:25: 45:11:65:ea:77:e3:bc:bd:d3:a6:3a:a1:1e:77:e5: d9:14:31:17:31:92:75:f6:61:4f:83:e3:a4:f2:55: da:48:84:90:81:5c:81:29:c0:d8:39:98:a2:5f:0e: 6f:6e:b1:3d:c8:ec:f0:4a:3e:f7:2d:7b:11:f9:f4: 40:60:21:1f:b9:7a:81:3c:e9:35:00:63:1f:ff:4c: be:34:b2:4b:64:0b:14:e0:bb:e5:c6:fa:fb:ce:7f: aa:0e:01:a1:3f:41:be:d4:ea:4b:fe:d5:6b:2c:7d: 5b:b5:38:a5:11:26:46:39:36:2d:b6:81:62:a7:7a: 74:0e:d8:fa:d5:1a:05:b4:67:f8:93:d4:94:44:15: 18:2c:17:f7:36:15:55:90:c5:bd:c8:67:1f:0c:76: 1c:8b:a4:e4:a6:9c:b5:0b:ac:f1:c3:fe:01:12:97: 3f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C9:C9:79:A8:AA:C1:50:42:2B:E8:E0:7F:8B:8F:FB:2D:7A:5D:A8 X509v3 Authority Key Identifier: keyid:B0:EF:19:BC:B2:3A:2F:04:C5:86:AC:13:11:A9:1B:C7:CA:2A:97:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sO8ZvLI6LwTFhqwTEakbx8oql2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/af3e51-79d6-4078-a569-d0003a6b5224/1/sO8ZvLI6LwTFhqwTEakbx8oql2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3b:89:3f:e8:b0:15:e3:2f:24:1a:0f:32:21:8f:67:4f:50: 9a:73:95:6e:a9:2d:19:9a:9e:aa:e5:2f:94:ed:50:2c:d4:b3: 0c:53:6c:4b:46:e8:c0:b4:56:0a:74:77:a5:c0:54:af:40:71: 3e:ce:f7:1d:5b:6d:13:01:62:f2:12:81:51:cb:19:e2:ab:a3: ea:de:d9:47:12:b8:2f:92:15:90:82:c6:0e:32:b0:86:f0:de: 96:9a:a8:52:05:74:b5:78:c0:2a:6c:f4:b1:31:82:b2:dd:57: 90:87:98:12:10:49:96:30:ef:00:c6:4f:7b:be:fe:3f:a5:89: 28:f4:90:d1:45:18:3f:67:d1:07:4b:5b:dc:aa:9b:8c:f8:f5: f1:98:48:79:80:f8:4e:b9:47:8d:41:27:d9:80:66:a7:00:ca: a6:c3:03:2b:73:a0:62:27:e0:ff:96:a9:a8:aa:e4:1f:da:e9: 2f:2c:96:e7:f9:a6:99:a1:e9:87:a2:ef:82:5e:76:fb:45:a5: 9d:9c:28:5f:4e:28:0c:59:2a:8f:57:f1:c6:d6:2d:92:9e:32: f5:20:b4:18:3d:5a:06:9b:5b:5f:8c:81:15:36:52:b7:9a:d3: 32:ce:42:f0:84:df:3b:e2:71:83:1c:14:af:d8:2a:11:dd:e4: 5b:18:1b:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrWBhg0ELtiBMqXHmeiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwZWYxOWJjYjIzYTJmMDRjNTg2YWMxMzExYTkxYmM3Y2Ey YTk3NjUwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhjY2M5Yzk3OWE4YWFjMTUwNDIyYmU4ZTA3ZjhiOGZmYjJkN2E1ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMgDHGIPWmSwNaRgmkYr6xU4+isV 9sGrN1mUSZCpDziY6q6RaduqT3qDwHn3FfXXvBrd1pCieZZpxUNQGEFvT25X4b4G Kterdk24a7XIOtNVSW7PsNezjiVFEWXqd+O8vdOmOqEed+XZFDEXMZJ19mFPg+Ok 8lXaSISQgVyBKcDYOZiiXw5vbrE9yOzwSj73LXsR+fRAYCEfuXqBPOk1AGMf/0y+ NLJLZAsU4Lvlxvr7zn+qDgGhP0G+1OpL/tVrLH1btTilESZGOTYttoFip3p0Dtj6 1RoFtGf4k9SURBUYLBf3NhVVkMW9yGcfDHYci6Tkppy1C6zxw/4BEpc/jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzJyXmoqsFQQivo4H+Lj/stel2oMB8GA1UdIwQY MBaAFLDvGbyyOi8ExYasExGpG8fKKpdlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1Njkt ZDAwMDNhNmI1MjI0LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZjNlNTEtNzlkNi00MDc4LWE1NjktZDAwMDNhNmI1MjI0 LzEvc084WnZMSTZMd1RGaHF3VEVha2J4OG9xbDJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzuJP+iw FeMvJBoPMiGPZ09QmnOVbqktGZqequUvlO1QLNSzDFNsS0bowLRWCnR3pcBUr0Bx Ps73HVttEwFi8hKBUcsZ4quj6t7ZRxK4L5IVkILGDjKwhvDelpqoUgV0tXjAKmz0 sTGCst1XkIeYEhBJljDvAMZPe77+P6WJKPSQ0UUYP2fRB0tb3KqbjPj18ZhIeYD4 TrlHjUEn2YBmpwDKpsMDK3OgYifg/5apqKrkH9rpLyyW5/mmmaHph6Lvgl52+0Wl nZwoX04oDFkqj1fxxtYtkp4y9SC0GD1aBptbX4yBFTZSt5rTMs5C8ITfO+JxgxwU r9gqEd3kWxgbtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:19 2025 by rpki-client